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software (CPU) 
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Entry mode 
Halt/monitor 
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Software breakpoint 
instruction 


Put a BKPT instruction into scan 
chain 4 (Instruction Transfer 
Register) through Debug TAP or 
Use BKPT instruction directly in 
the code. 


BKPT instruction must reach execution 
stage. 


Halt/monitor 


Vector trap breakpoint 


Debug TAP 


Program vector trap register and 
address matches. 


Halt/monitor 


Watchpoint hits 


Debug TAP 
or software (CP1 4) 


Program watchpoint register and/or 
context-ID register and comparisons 
succeed with Instruction Address and/or 
CP15 Context ID ( 2 ). 


Halt/monitor 
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Internal debug request 


Debug TAP 


Halt instruction has been scanned in. 
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External debug request 




EDBGRQ input pin is asserted. 
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CY In monitor mode, breakpoints and watchpoints cannot be data-dependent. 

( 2 )': The cores have support for thread-aware breakpoints and watchpoints,,^ ocdsrteoioW- t o enable secure 
debug on some particular threads. 
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for test 
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0: halt mode 
1 : monitor mode 
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R/W by programming the ICE by the JTAG (scanl) 
• R/W by using MRC/MCR instruction (CP 1 4) 


yes 


Secure debug 
enable bit 


0: debug in non- 
secure world only. 
1: debug in secure 
world and non- 
secure world 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 


Secure trace 
enable bit 


0: ETM is enabled 

in non-secure 

world only. 

1 : ETM is enabled 
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and non-secure 

world 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 


Secure user- 
mode enable 
bit 


0: debug is not 
possible in secure 
user mode 
1 : debug is 
possible in secure 
user mode 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 
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thread-aware 
enable bit 
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possible for a 
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1 : debug is 
possible -for a , 
particular thread 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

Jn-Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 
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No intrusive debug in entire secure world is possible. 
Any debug request, breakpoints, watchpoints, and other 
mechanism to enter debug state are ignored in entire 
secure world. 
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Debug in entire secure world is possible 
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Debug in secure user-mode only. Any debug request, 
breakpoints, watchpoints, and other mechanism to enter 
debug state are taken into account in user mode only. 
(Breakpoints and watchpoints linked or not to a thread 
ID are taken into account). Access in debug is restricted 
to what secure user can have access to. 
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Debug is possible only in some particular threads. In 
that case only thread-aware breakpoints and 
watchpoints linked to a thread ID are taken into account 
to enter debug state. Each thread can moreover debug 
its own code, and only its own code. 
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meaning 


Secure trace enable 
bit 


Secure user-mode 
debug enable bit 


Secure thread-aware 
debugs enable bit 


a ■ 


X 


X 


No observable debug in entire secure world is possible. 
Trace module (ETM) must not trace internal core 
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only. 
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Trace is possible only when the core is executing some 
particular threads in secure user mode. Particular 
hardware must be dedicated for this, or re-use 
breakpoint register pair: Context ID match must enable 
trace instead of entering debug state. 
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Method of entry 
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Non-secure prefetch abort handler 


secure prefetch abort handler 


Software breakpoint instruction 


Non- secure prefetch abort handler 


secure prefetch abort handler 


Vector trap breakpoint 


Disabled for non-secure data abort 
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Disabled for secure data abort and 
secure prefetch abort exceptions ( ! ). 
For other exceptions, secure prefetch 

abort. 
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secure data abort handler 
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External debug request 


Debug state in halt mode 
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(2) Note that when external or internal debug request is asserted, the core enters halt mode and not monitor mode. 

Figure '?i ft 



Method of entry 



Entry in non-secure world 



entry in secure world 



Breakpoint hits 



Non-secure prefetch abort handler 




Debug re-entry from system 
speed access 



C) As substitution of BKPT instruction in secure world from non-secure world is not possible, non-secure abort 
must handle the violation. 
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